PRIVACY POLICY
1. Introduction
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), this Policy describes how Servicios Clínicos, S.A., which operates under the brand Serveis Clínics, processes the personal data of website users. Confidentiality and security are essential values and we will only collect the necessary information.
- Who is the data controller
- What categories of personal data we process
- How we get the data
- Purposes, legal bases and retention periods
- Recipients and possible international transfers
- Rights of data subjects and security measures
- Modifications to the Privacy Policy
2. Data controller
The data controller is Servicios Clínicos, S.A. (“Clinical Services” or the “Data Controller”), with registered office at Calle García Mariño, núm. 4, 08022 Barcelona, Spain. You can contact the Data Protection Officer at dpo@serviciosclinicos.com.
3. Personal data subject to processing
| Data Category | |
|---|---|
| Identifiers | Name and surname. |
| Contact | Telephone and email. |
| Connection | IP address or device data. |
| Related to the query | Data provided that are relevant to attend to the query. |
| Health | Medical evaluations, test results, pathologies and diseases, medical procedures, among others. |
| Family | members Contact person. |
4. How we obtain your data
We process the data generated by browsing the website, those provided when contacting us through the available channels and those that we may infer from browsing.
5. Purposes and legal bases
A. Admissions
To admit patients to the center, it is necessary to complete the admission form. We will process identification data, personal characteristics, contact, health, family data and any other information relevant to the possible provision of services. The legal basis is pre-contractual measures or the execution of a contract to provide our services to the patient.
B. Contact
When you contact us by email, post or telephone, we will process the data to manage and respond to your query. The legal basis is our legitimate interest in serving it or, where applicable, compliance with legal obligations.
When health data is processed, considered as special categories of data, the processing is covered by Article 9.2.h) of the GDPR, relating, among other cases, to preventive medicine, medical diagnosis, health or social care or treatment, and management of health or social systems and services.
C. Judicial proceedings
Serveis Clínics may process data to exercise or defend actions in administrative or judicial proceedings for legal or contractual breaches. The data may be communicated to lawyers, solicitors, courts and tribunals and other third parties involved, such as notaries, official registries or public bodies. The legal basis is legitimate interest and compliance with legal obligations.
6. Data retention
Personal data will be kept until the purpose for which they were collected is fulfilled and, in any case, for a maximum period of 20 years. They will then be duly blocked during the legal limitation periods to attend to possible claims and requirements from the competent authorities.
7. Recipients and transfers
The data will only be communicated to third parties, bodies and public institutions when there is a legal obligation. Serveis Clínics may also rely on suppliers who process data on behalf of the entity, subject to the corresponding contract and appropriate technical and organisational measures.
In general, data will not be subject to international transfers. If necessary, users will be informed and the guarantees required by the regulations will be applied to ensure a level of protection equivalent to that of the European Union.
8. Rights
You can exercise your rights of access, rectification, deletion, limitation, opposition and portability, as well as withdraw consent when this is the legal basis for the processing. You can do so by writing to Servicios Clínicos, S.A., Calle García Mariño, núm. 4, 08022 Barcelona, Spain, or at dpo@serviciosclinicos.com. You can also complain to the Spanish Data Protection Agency (AEPD).
